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This application note describes a simple and reliable 
method of programming either the MC68HC11's internal 
EEPROM, or EEPROM connected to the MCU's external 
bus. The data to be programmed is downloaded from 
any standard personal computer (PC) fitted with a serial 
communications port. In addition to the programming 
procedure, the software incorporates the facility to verify 
the contents of the MCU's internal or external memory 
against code held on a PC disc. Both program and verify 
options use data supplied in S record format, which is 
downloaded from the PC to the MC68HC11 using the 
RS232 protocol supported by the MCU's SCI port. 

The minimum MCU configuration required to program 
the MC68HC11's internal EEPROM is shown in Figure 1. 
This consists only of the MCU, an RS232 level shifting 
circuit, plus an 8 MHz crystal and a few passive com- 
ponents. 

To initiate the download, the PC is connected to the 
MC68HC1 1 SCI transmit and receive lines via a level shif- 
ter. The circuit of Figure 1 uses a Maxim MAX232 to 



eliminate the need for additional ±12 V supplies. The 
MCU's special bootstrap mode is invoked by applying a 
logic zero to the MODA and MODB pins, followed by a 
hardware RESET. 

Removing the RESET condition causes the MCU to start 
execution of its bootloader program, located in internal 
ROM, between addresses $BF40 and $BFFF. In normal 
single-chip or expanded modes, the boot ROM is not 
accessible, and reads from these memory locations will 
result respectively in irrelevant data or external memory 
fetches. 

An additional consequence of bootstrap operation is 
that all vectors are relocated to the boot ROM area. With 
the exception of the RESET vector, which points to the 
start of the boot ROM, the remaining interrupt vectors all 
point to an uninitialized jump table in RAM. Three bytes 
are reserved for each entry in the jump table, to allow 
for an extended jump instruction. Tables 1 and 2 detail 
the memory map of the bootstrap vectors and an ex- 
ample RAM jump table. 
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Figure 1. MC68HC11 Bootstrap Mode Connection to RS232 Line 




Table 1. Bootstrap Vector Assignments 



r 1 

Boot ROM 


Address 


Vector 


Description 


BFFE 


BF40 


Bootstrap Reset 


BFFC 


OOFD 


Clock Monitor 


BFFA 


00 FA 


COP Fail 


BFF8 


00F7 


Illegal Opcode 


BFF6 


00 F4 


SWI 


BFF4 


00F1 


XIFiQ 


BFF2 


00EE 


IRQ 


BFFO 


OOEB 


Real Time Interrupt 


BFEE 


00E8 


Timer Input Capture 1 


BFEC 


00E5 


Timer Input Capture 2 


BFEA 


00E2 


Timer Input Capture 3 


BFE8 


OODF 


Timer Output Compare 1 


BFE6 


OODC 


Timer Output Compare 2 


BFE4 


00D9 


Timer Output Compare 3 


BFE2 


00D6 


Timer Output Compare 4 


BFEO 


0OD3 


Timer Output Compare 5 


BFDE 


OODO 


Timer Overflow 


BFDC 


OOCD 


Pulse Accumulator Overflow 


BFDA 


OOCA 


Pulse Accumulator Input Edge 


BFD8 


00C7 


SPI 


BFD6 


00C4 


SCI 



Table 2. RAM Jump Table 



Internal RAM 


Address 


Typical Instruction 


OOFD 


JMP CLKMON 


00 FA 


JMPCOPFL 


....etc 





Note that, before any interrupts are enabled in boot- 
strap mode, it is the software designer's responsibility to 
initialize all appropriate entries in the jump table. 

As this application note does not make use of the 
MC68HC11's interrupt system, the jump table is not set 
up. 

The bootstrap program continues by initializing the SCI 
transmitter and receiver to 7812 baud and proceeds to 
examine the state of the NOSEC bit in the CONFIG reg- 
ister. If this is at logic zero (security enabled) the boot- 
loader will erase the entire contents of internal EEPROM 
and also the CONFIG register. 

This feature is particularly useful for security conscious 
applications, where the internal EEPROM contains infor- 
mation of a proprietary or confidential nature. If the NO- 
SEC bit is at logic one, then the erasing sequence is not 
carried out. 



Note also that erasing the CONFIG register disables the 
security feature. 

The bootstrap program then issues a break condition 
on the SCI transmit line, and waits for the reception of 
the first byte. In this application, no use is made of the 
break transmitted by the SCI. 

At this point, it is necessary to initiate the PC S record 
downloader program, called EELOAD.BAS (written in 
BASIC). It will display a header message, and prompt the 
user for the number of the COM channel (either one or 
two) which is connected to the MC68HC11. A listing of 
EELOAD.BAS is given at the back of this application note. 

The PC-resident program will now configure the ap- 
propriate COM channel to 1200 baud, one stop bit, no 
parity, and download the binary file EEPROGIX.BOO from 
the PC to the MC68HC11. 

The MC68HC11's bootloader will automatically detect 
the fact that the first incoming character is received at a 
different baud rate, and change its SCI rate to 1200 baud. 

It will then proceed to load the binary file into all 256 
RAM locations and then jump to address $0000 (i.e., the 
first RAM location). 

EEPROGIX.BOO consists of the MC68HC11 executable 
code shown in the source listing at the back of this ap- 
plication note, with the addition of $FF at the head of the 
file, and $00 appended up to the 256th byte. This program 
is designed to receive S records from the PC and program 
the data fields into the appropriate EEPROM memory 
locations. 

A point to note is that the initial $FF byte in EEPRO- 
GIX.BOO is only used to detect the baud rate of the PC, 
and is not echoed back, while the remaining 256 bytes 
are echoed by the MC68HC11'sSCI transmitter. However, 
during download of EEPROGIX.BOO, the PC does not 
detect the echo, as this feature is unnecessary at this 
stage. 

Once the newly downloaded S record programmer 
starts execution in the MC68HC11, it configures the SCI 
to 9600 baud, then waits for a control character from the 
PC. This character will determine the operating mode of 
the S record programmer. The options available are shown 
in Table 3. Note that these programming utilities can be 
used to load and verify external RAM as well as external 
EEPROM. 



Table 3. S Record Downloader Operating Mode Options 



Control Character 


Operating Mode 


X 


Program External EEPROM/RAM 


I 


Program Internal EEPROM 


V 


Verify Internal or External EEPROM/RAM 



If the S record programmer has been downloaded suc- 
cessfully, the PC resident program will now — 

1. Request whether the downloaded data must be 
echoed to the screen. 

2. Prompt the user for the required operating mode. 

3. Request the name of the S record file to be down- 
loaded from the PC. 
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Once the download starts, every character in the S re- 
cord file is immediately echoed back to the PC. This en- 
sures synchronism between the PC and the MC68HC11, 
and at the same time, removes some of the overhead 
associated with the EEPROM programming delay time. 
It also removes the need for a hardware handshake. 



VERIFY OPTION 

If a verify error occurs, the actual stored byte value is 
returned to the PC, where it is displayed with a preceding 
colon delimiter. In this way, EEPROM data and address 
faults can be quickly identified by inspection. At the end 
of the verify download, the total number of errors is dis- 
played. 



programming voltage is applied. Also, the programming 
time delay must be implemented or initiated by software. 
In this application, a software timing loop is used, but 
one of the internal MC68HC11 timer functions could 
equally well be used to provide the time delay. 

Figures 2 and 3 show the flowcharts of the internal 
EEPROM erase and write sequences. 




Y 


SELECT BULK 


> > 


ERASE MODE 



INTERNAL OR EXTERNAL OPTION 

If a programming error occurs in either internal or ex- 
ternal programming mode, i.e., if the read back data after 
programming does not correspond to the expected data, 
the MC68HC1 1-resident software will hang up. This con- 
dition is detected by the PC-resident program, which will 
then abort the download and display an error message. 
This same error message is displayed if a fault or incor- 
rect connection exists on the serial link between the PC 
and MC68HC11. 

There is one exception to this operation. It stems from 
the fact that changes to the MC68HC11's CONFIG register 
can only be detected after a subsequent hardware RESET. 
If the CONFIG register address ($103F) is detected, then 
the CONFIG register is not read directly after program- 
ming. This prevents premature termination of the down- 
load. 

To allow programming of the CONFIG register in all 
mask set versions of the MC68HC11A series, and to per- 
mit expanded mode operation, the MCU resident pro- 
gram switches from bootstrap mode to special test mode, 
by setting the MDA bit (bit 5) in the HPRIO register (ad- 
dress $103C). 

If the user wishes to maintain operation in bootstrap 
mode, (to verify internal ROM code, for instance), then 
the 'BSET HPRIO,X,#MDA' instruction on the 8th line of 
program code in EEPROGIX.ASC should be removed, and 
the program reassembled. 



PROGRAMMING INTERNAL EEPROM 

The techniques for programming internal and external 
EEPROM are quite different. 

With internal EEPROM, it is first generally necessary to 
erase the required byte (erased state is $FF), and follow 
with a write of data to the same address. 

The internal programming sequence involves access- 
ing the PPROG register (address $103B) to latch the EE- 
PROM address and data buses for the duration that the 




SELECT BYTE 
ERASE MODE 



ENABLE ERASE MODE 
ENABLE ADDRESS AND 
DATA LATCHES 



WRITE TO REQUIRED 
MEMORY ADDRESS 
(DATA IRRELEVANT) 



APPLY PROGRAMMING 
VOLTAGE 



WAIT 10 ms 



REMOVE PR 
VOL 


3GRAMMING 
FAGE 






DISABLE E 
DISABLE AC 
DATA L 


HASE MODE 
DRSSS AND 
ATCHES 





( END ) 



Figure 2. Internal EEPROM Erase Sequence 
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( BEGIN ) 



ENABLE BYTE WRITE MODE 
ENABLE ADDRESS AND 
DATA LATCHES 






WRITE REQUIRED DATA 
TO REQUIRED ADDRESS 


1 




APPLY PRO 
VOL! 


3RAMMING 
AGE 



WAIT 10 ms 



REMOVE PRC 
VOL! 


1GRAMMING 
AGE 






DISABLE WRITE MODE 
DISABLE ADDRESS AND 
DATA LATCHES 




Figure 3. Internal EEPROM Write Sequence 



PROGRAMMING EXTERNAL EEPROM 

Figure 4 shows the hardware needed to interface the 
MC68HC1 1 to an external 2864 EEPROM, which provides 
a total of 8K bytes of reprogrammable memory. The ad- 



dition of the MC68HC24 gives a minimal component count 
implementation of a circuit which accurately emulates 
the MC68HC1 1 A8 single-chip MCU. The added benefit of 
using the 2864 is that the software designer's program 
and/or data can be modified without removing the em- 
ulator from the target system. This can be particularly 
useful in applications where the emulator may be en- 
closed in a confined space or in an environmental cham- 
ber. 

To program the 2864 from the PC, the external oper- 
ating mode option (X) must be selected from the EELOAD 
menu. 

Programming the 2864 involves fewer operations than 
are needed for internal EEPROM, as the former has no 
equivalent of the PPROG control register. In addition, the 
erase sequence and delay time are handled automatically 
by the 2864 on-chip logic. 

A data polling technique is used to determine the end 
of the programming delay time. This involves examining 
the most significant bit of the data programmed, by read- 
ing from the address just written to, until the data be- 
comes true. (During the programming delay time, the MS 
bit will read as the complement of the expected data). 

This means that the same software algorithm can be 
used to download code or data to external RAM as well 
as external EEPROM. 



EMULATOR ADDRESS DECODING 

The emulator circuit in Figure 4 shows the MC68HC1 1 's 
address line A1 3 connected to pin 26 of the 2864. Though 
this pin is actually unused by the 2864, its inclusion per- 
mits the replacement of the 2864 with a 27128 16K byte 
EEPROM memory. 

An important outcome of this is that, when a 2864 is 
used, the memory range $C000-$DFFF is mapped over 
the normally used 8K byte range of $E000-$FFFF. In prac- 
tice, this should never pose a problem. When a 27128 
memory is used, its full 16K byte address range of 
$C000-$FFFF is available to the MCU. 

Included in the S record programmer, irrespective of 
the selected programming mode, is a feature to force 
program execution at the address specified in the S9, S 
record address field, provided the address is not $0000. 

Figure 5 shows the general format of S record files. 
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Figure 4. MC68HC11A8 Emulator Using 2864 EEPROM 




.RECORD TYPE: SO, SI, OR S9 

50 - HEADER RECORD: LOAD ADDRESS FIELD = $0000. CODE/DATA 

FIELD CONTAINS OPTIONAL DESCRIPTIVE INFORMATION. 

51 — CODE/DATA RECORD. CODE/DATA FIELD CONTAINS EXECUTABLE CODE OR DATA. 

S9 — TERMINATION RECORD: LOAD ADDRESS FIELD CONTAINS OPTIONAL EXECUTION ADDRESS. THERE IS NO 
CODE/DATA FIELD, JUST A CHECKSUM. 

NUMBER OF HEX CHARACTERS FOLLOWING. (Len) = $14 

MEMORY LOAD ADDRESS FIELD. (Ldhi, Ldlo) = $C01E 



SI 14 C01E0B29BDC02A18386A3B6F3B39180926FC39DE 
> v 



• CODE/DATA FIELD ' ** CHECKSUM BYTE 

TON BYTES OF CODE/DATA 

APART FROM THE LETTER S AT THE START, ALL CHARACTERS IN THE RECORDS ARE HEXADECIMAL DIGITS REPRESENTED IN ASCII FORMAT. 



CHECKSUM ALGORITHM: LSB OF Len + Ldhi + Ldlo + 



n -i 

2 byte k 
k = J 



NOTE: The S-record programmer in this application ignores the checksum byte. 

Figure 5. S-Record Format 
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10 ' ******* EELOAD.BAS 20/3/87 Version 1.0 *******' 
20 ' Uritten by R.Soja, Motorola East Kilbride' 
30 ' Motorola Copyright 1987' 

40 ' This program downloads S record file to the MC68HC11 through special' 
50 ' bootstrap program, designed to program either internal or external ' 



60 ' EEPROM in the 68HC11's memory map' 

70 ' The loader can also verify memory against an S record file.' 

80 ' Downloaded data is optionally echoed on terminal.' 

90 ' ================================== 

100 CR$=CHR$(13) 
110 MIN$=CHR$(32) 
120 MAX$=CHR$(127) 
130 ERM$="Can't find " 
140 LOADER$="EEPROGIX.BOO" 
150 CLRLN$=SPACE$(80) 

160 VER$="1.0": 'Version number of EELOAD' 

170 ERRTOT%=0: 'Number of errors found by verify operation' 

180 CLS 

190 PRINT 11 «««« EELOAD Version ";VER$;" »»»»» 

200 PRINT " «««« 68HC11 Internal/External EEPROM loader/verifier »»»»» 
210 PRINT 

220 PRINT "==> Before continuing, ensure 68HC11 is in bootstrap mode," 
230 PRINT " RESET is off, and COM1 or COM2 is connected to the SCI" 
240 PRINT 

250 ' First make sure loader program is available' 

260 ON ERROR GOTO 880 

270 OPEN LOADERS FOR INPUT AS #2 

280 CLOSE #2 

290 ON ERROR GOTO 

300 CHAN$=»0" 

310 ROU=CSRLIN: 'Store current line number' 
320 WHILE CHAN$<>"1" AND CHAN$<>"2" 
330 GOSUB 1070 

340 LINE INPUT "Enter COM channel number (1/2):", CHANS 
350 WEND 

360 CM$="COM"+CHAN$ 

370 ' Now set baud rate to 1200 and load EEPROG through boot loader' 
380 ' by executing DOS MODE and COPY commands' 
390 SHELL "MODE "+CMS+" : 1 200 , N , 8 , 1 " 

400 SHELL "COPY "+LOADERS+" "+CMS 

401 GOSUB 1070 

402 FOR I%=1 TO 4:PRINT CLRLNS; :NEXT I%:PRINT: 'Clear DOS commands from screen' 
410 ECHO$=" 11 

420 WHILE ECHO$<>"Y" AND ECHO$<>"N" 
430 GOSUB 1070 

440 LINE INPUT "Do you want echo to screen (Y/N) : ",ECHO$ 
450 WEND 

470 ROW=CSRLIN: 'Store current -line number' 



480 EE0PT$=" ": 'Initialise option char' 
490 WHILE EE0PT$<>"X" AND EEOPT$o"I" AND EEOPT$o"V" 
500 GOSUB 1070 

510 LINE INPUT "Select Internal, external or Verify EEPROM option (I/X/V):",EEOPT$ 
520 WEND 

530 OPT$="Verify" 

540 IF EEOPT$="I" THEN OPT$="Internal" 
550 IF EEOPT$="X" THEN OPT$="External" 

560 ROW=CSRLIN: 'Store current line position in case of file error' 
570 RXERR=0: 'Initialise number of RX errors allowed' 
580 ON ERROR GOTO 910 
590 GOSUB 1070 
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600 IF OPT$=»Verify" THEN INPUT "Enter filename to verify: »,F$ ELSE INPUT "Enter filename to download:", FS 
610 CLOSE 

620 OPEN F$ FOR INPUT AS #2 
630 ON ERROR GOTO 

640 'COM1 or 2 connected to SCI on HC11' 
650 OPEN CM$+" : 9600, N, 8,1" AS #1 

660 'Establish contact with HC11 by sending CR char & waiting for echo' 
670 ON ERROR GOTO 860: 'Clear potential RX error' 
680 PRINT #1,CR$; 

690 GOSUB 990: 'Read char into B$' 

700 'Transmit Internal .External or Verify EEPROM option char to 68HC11' 
710 PRINT #1 ,EEOPT$; : GOSUB 990: 'No echo to screen' 

720 ON ERROR GOTO 930 

730 PRINT "Starting download of <";F$;"> to: ";OPT$;" Eeprom" 
732 IF ECHO$="Y" THEN E%=1 ELSE E%=0 
734 IF EEOPT$="V" THEN VX=1 ELSE V%=0 
740 WHILE NOT EOF(2) 

750 INPUT #2,S$ 

751 L%=LEN(S$) 

752 FOR I%=1 TO L% 

760 PRINT #1,MID$(S$,I%,1);:GOSUB 990: IF E% THEN PRINT B$; 

770 IF V% THEN GOSUB 1030: IF C$<>"» THEN PRINT ":";HEX$(ASC(C$)); 

785 NEXT 1% 

787 IF E% THEN PRINT 

790 WEND 

795 PRINT 

800 PRINT "Download Complete" 

810 IF V% THEN PRINT ERRTOT%;" error(s) found" 

820 CLOSE #2 

830 SYSTEM 

840 END 

850 ' ' 

860 IF RXERR>5 THEN 940 ELSE RXERR=RXERR+1 :RESUME 610 
870 ' ' 

880 PRINT:PRINT ERM$; LOADERS: PR I NT "Program aborted" 
890 GOTO 830 

900 ' ' 

910 PRINT ERM$;F$;SPACE$(40) 

920 RESUME 580 

930 ' ' 

940 PRINT:PRINT "Communication breakdown: Download aborted" 
950 GOTO 820 

960 ' ' 

970 '--SUB waits for received character, with time limit' 

980 '-- returns with char in B$, or aborts if time limit exceeded' 

990 T0%=0:WHILE LOC(1)=0:IF T0%>100 THEN 940 ELSE T0%=T0%+1 :WEND 

1000 B$=INPUT$(1,#1):RETURN 

1010 ' ' 

1020 '--SUB waits for received character, with time limit' 

1025 '-- returns with char in C$, or null in C$ if time limit exceeded' 

1030 T0%=0:C$="":WHILE LOC(1)=0 AND T0%<1 :T0%=T0%+1 :WEND 

1040 IF LOC(1)>0 THEN C$=INPUT$( 1 ,#1 ) :ERRTOT%=ERRTOT%+1 

1050 RETURN 

1060 ' ' 

1070 '--SUB Clear line ' 
1080 LOCATE ROW, 1 , 1 :PRINT CLRLNS 
1090 LOCATE ROW, 1 , 1 : RETURN 
1100 ' ' 
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M68HC11 Absolute Assembler Version 2.4 C:EEPROGIX.ASC 



^ ^ ************************************************************* 

2 A * EEPROGIX.ASC 19/3/87 Revision 1.0 * 

3 A * 

4 A * Written by R.Soja, Motorola, East Kilbride * 

5 A * Motorola Copyright 1987. * 

6 A * * 

7 A * This program loads S records from the host to * 

8 A * either a 2864 external EEPROM on the 68HC11 external bus, * 

9 A * or to the 68HC11's internal EEPROM. It can also be used * 

10 A * verify memory contents against an S record file or just * 

11 A * load RAM located on the 68HC11's external bus. * 

12 A * Each byte loaded is echoed back to the host. * 

13 A * When programming a 2864, data polling is used to detect * 

14 A * completion of the programming cycle. * 

15 A * As the host software always waits for the echo before * 

16 A * downloading the next byte, host transmission is suspended * 

17 A * during the data polling period. * 

18 A * Because the serial communication rate (~1mS/byte) is * 

19 A * slower than the 2864 internal timer timeout rate (~300uS) * 

20 A * page write mode cannot be used. This means that data * 

21 A * polling is active on each byte written to the EEPROM, * 

22 A * after an initial delay of approx 500uS. * 

23 A * * 

24 A * When the internal EEPROM is programmed, instead of data * 

25 A * polling, each byte is verified after programming. * 

26 A * In this case, the 500uS delay is not required and is * 

27 A * bypassed. * 

28 A * If a failure occurs, the program effectively hangs up. It * 

29 A * is the responsibility of the host downloader program to * 

30 A * detect this condition and take remedial action. * 

31 A * The BASIC program EELOAD just displays a 'Communication * 

32 A * breakdown' message, and terminates the program. * 

33 A * 

34 A * When used in the verify mode, apart from the normal echo * 

35 A * back of each character, all differences between memory * 

36 A * and S record data are also sent back to the host. * 

37 A * The host software must be capable of detecting this, and * 

38 A * perform the action required. * 

39 A * The BASIC loader program EELOAD simply displays the * 

40 A * returned erroneous byte adjacent to the expected byte, * 

41 A * separated by a colon. * 

42 A * * 

43 A * Before receiving the S records, a code byte is received * 

44 A * from the host, i.e.: * 

45 A * ASCII 'X' for external EEPROM * 

46 A * ASCII 'I' for internal EEPROM * 

47 A * ASCII 'V for verify EEPROM * 

48 A * * 

49 A * This program is designed to be used with the BASIC EELOAD * 

50 A * program. * 

51 A * Data transfer is through the SCI, configured for 8 data * 

52 A * bits, 9600 baud. * 

53 A * * 

54 A PAGE 



55 A 




* Constants 






56 A 


0080 


TDRE 


EQU 


$80 




Of A 


nfton 
UU£U 


RDRF 


EQU 


$20 




58 A 




MDA 


EQU 


$20 




59 A 


0040 


SMC© 


EQU 


$40 




60 A 


0D05 


mS10 


EQU 


10000/3 


10mS delay with 8MHz xtal. 


61 A 


00A6 


US500 


EQU 


500/3 


500uS delay. 


62 A 




* 








63 A 




* Registers 






64 A 


002B 


BAUD 


EQU 


$2B 




65 A 


002C 


SCCR1 


EQU 


$2C 




66 A 


002D 


SCCR2 


EQU 


$2D 




67 A 


002E 


SCSR 


EQU 


$2E 




68 A 


002F 


SCDR 


EQU 


$2F 




69 A 


003B 


PPROG 


EQU 


$38 




"7fl A 
f A 


003C 


HPRIO 


EQU 


$3C 




71 A 


103F 


CONFIG 


EQU 


$103F 




72 A 




* 








73 A 




* Variables. Note: 


They overwrite initialisation code!!!! 


74 A 


0000 




ORG 


$0 




"7r k ft ft ft ft 

75 P 0000 


0001 


EEOPT 


RMB 


1 




76 P 0001 


0001 


MASK 


RMB 


1 




77 P 0002 


0001 


TEMP 


RMB 


1 




78 P 0003 


0001 


LASTBYTE 


RMB 


1 




79 A 




* 








80 A 




* Program 








81 A 


0000 




ORG 


$0 




o ft • ftftftft 

82 A 0000 


8E00FF 




LDS 


#$FF 




ft ~J % AAA7 

83 A 0003 


CE1000 




LDX 


#$1000 


Offset for control registers. 


84 A 0006 


6F2C 




CLR 


SCCR1 ,X 


Initialise SCI for 8 data bits, 9600 baud 


DC a nnno 
85 A 0008 


ft ft 7A^r 

CC300C 




LDD 


#$300C 




86 A 000B 


A72B 




STAA 


BAUD.X 




07 a nnnr. 
Of A UUUU 


c70n 
tfcD 




STAB 


SCCR2.X 




go a nnfic 
Bo A UUUr 






BSET 


HPRIO, X,#MDA 


Force Special Test mode first, 


on a 
oV A 




*=» MAINTAIN SPECIAL- TEST MODE TO ALLOW 


B96D CONFIG REGISTER PROGRAMMING <<== 


90 A 




• 


BCLR HPRIO, X,#SM0D and then expanded mode. (From Bootstrap mode) 


91 A 0012 


9F00 


ReadOpt 


STS 


<EE0PT 


Default to internal EEPROM: EEOPT=0; MASK=$FF; 


92 A 0014 


8D7C 




BSR 


READC 


Then check control byte for external or interna 


93 A 0016 


C149 




CMPB 


9*1' 


EEPROM selection. 


ft/ a ftr*t 1 o 

94 A 0018 


2714 




BEQ 


LOAD 




95 A 001A 


C158 




CMPB 


#'X' 


If external EEPROM requested 


96 A 001 C 


2609 




BNE 


OptVerf 




97 A 001E 


7C0000 




INC 


EEOPT 


then change option to 1 


98 A 0021 


8680 




LDAA 


#$80 




99 A 0023 


9701 




STAA 


<MASK 


and select mask for data polling mode. 


100 A 0025 


2007 




BRA 


LOAD 




101 A 




* 








A ft ft a ft ft ft T 

102 A 0027 


C156 


OptVerf 


CMPB 


#'V 


If not verify then 


A ft ~7 a ft ft ft/"\ 

103 A 0029 


26E7 




BNE 


ReadOpt 


get next character else 


* ft / a ft ft ft r\ 

104 A 002B 


7 a ft ft ft ft 

7A0000 




DEC 


EEOPT 


make EEOPT flag negative. 


105 A 




* 








106 A 


002E 


LOAD 


EQU 


* 




107 A 002E 


8062 




BSR 


READC 




4 ft ft M ft ft ^ ft 

108 A 0030 


C153 




CMPB 


#'S 


Wait until S1 or S9 received, 


109 A 0032 


26FA 




BNE 


LOAD 


discarding checksum of previous S1 record. 


110 A 0034 


805C 




BSR 


READC 




111 A 0036 


C131 




CMPB 


#'1 




112 A 0038 


2719 




BEQ 


LOAD1 
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113 A 003A C139 




CMPB 


#'9 




1H A 003C 26F0 




BNE 


LOAD 




115 A 003E 8D5F 




BSR 


RDBYTE 


Complete reading S9 record before terminating 


116 A 0040 17 




TBA 






117 A 0041 8002 




SUBA 


#2 


# of bytes to read including checksum. 


118 A 0043 8D6B 




BSR 


GETADR 


Get execution address in Y 


119 A 0045 8058 


LOAD 9 


BSR 


RDBYTE 


Now discard remaining bytes, 


120 A 0047 4A 




DECA 




including checksum. 


121 A 0048 26FB 




BNE 


LOAD9 




122 A 004A 188C0OO0 




CPY 


#0 


If execution address =0 then 


123 A 004E 27FE 




BEQ 


* 


hang up else 


124 A 0050 186E00 




JMP 




jump to it! 


125 A 


* 








126 A 0053 


LOAD1 


EQU 


* 




127 A 0053 8D4A 




BSR 


RDBYTE 


Read byte count of SI record into ACCB 


128 A 0055 17 




TBA 




and store in ACCA 


129 A 0056 8003 




SUBA 


#3 


Remove load address & checksum bytes from count 


130 A 0058 8056 




BSR 


GETADR 


Get load address into X register. 


131 A 005A 1809 




DEY 




Adjust it for first time thru' LOAD2 loop. 


132 A 005C 2017 




BRA 


LOAD1B 




133 A 


* 








134 A 005E D600 


LOAD 1 A 


LDAB 


EEOPT 


Update CC register 


135 A 0060 2B25 




BMI 


VERIFY 


If not verifying EEPROM then 


136 A 0062 2705 




BEQ 


DATAPOLL 


If programming external EEPROM 


137 A 0064 C6A6 




LDAB 


#uS500 




138 A 0066 5 A 


WAIT1 


DECB 




then wait 500uS max. 


139 A 0067 26FD 




BNE 


WAIT1 




140 A 0069 18E600 


DATAPOLL 


LDAB 




Now either wait for completion of programming 


141 A 006C D803 




EORB 


<LASTBYTE 


cycle by testing MS bit of last data written to 


142 A 006E 0401 




ANDB 


<MASK 


memory or just verify internal programmed data. 


143 A 0070 26F7 




BNE 


DATAPOLL 




144 A 0072 4 A 


LOAD 1 E 


DECA 




When all bytes done, 


145 A 0073 27B9 




BEQ 


LOAD 


get next S record (discarding checksum) else 


146 A 0075 8028 


LOAD 1 B 


BSR 


RDBYTE 


read next data byte into ACCB. 


147 A 0077 1808 




I NY 




Advance to next load address 


148 A 0079 7D0000 




TST 


EEOPT 




149 A 007C 2B05 




BMI 


L0AD1D 


If verifying, then don't program byte! 


150 A 007E 2743 




BEQ 


PROG 


If internal EEPROM option selected then program 


151 A 0080 18E700 




STAB 


,Y 


else just store byte at address. 


152 A 0083 D703 


LOAD1D 


STAB 


<LASTBYTE 


Save it for DATA POLLING operation. 


153 A 0085 20D7 




BRA 


LOAD 1 A 




154 A 


* 








155 A 0087 18E600 


VERIFY 


LDAB 


,Y 


If programmed byte 


156 A 008A D103 




CMPB 


<LASTBYTE 


is correct then 


157 A 008C 27E4 




BEQ 


L0AD1E 


read next byte 


158 A 008E 8008 




BSR 


WRITEC 


else send bad byte back to host 


159 A 0090 20E0 




BRA 


LOAD 1 E 


before reading next byte. 


160 A 


* 








161 A 0092 


READC 


EQU 


* 


ACCA, X, Y regs unchanged by this routine. 


162 A 0092 1F2E20FC 




BRCLR 


SCSR,X,#RDRF,* 




163 A 0096 E62F 




LDAB 


SCDR.X 


Read next char 


164 A 0098 1F2E80FC 


WRITEC 


BRCLR 


SCSR,X,#TDRE,* 




165 A 009C E72F 




STAB 


SCDR.X 


and echo it back to host. 


166 A 009E 39 




RTS 




Return with char in ACCB. 


167 A 


* 








168 A 009F 8DF1 


RDBYTE 


BSR 


READC 


1st read MS nibble 


169 A 00A1 8017 




BSR 


HEXBIN 


Convert to binary 


170 A 00A3 58 




LSLB 




and move to upper nibble 
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171 A 00A4 

172 A 00A5 

173 A 00A6 

174 A 00A7 

175 A 00A9 

176 A OOAB 

177 A OOAD 

178 A OOAF 

179 A 

180 A 

181 A OOBO 

182 A 00B1 

183 A 00B3 

184 A 00B4 

185 A 00B6 

186 A 00B8 

187 A 00B9 

188 A 

189 A 

190 A OOBA 

191 A OOBC 

192 A OOBE 

193 A OOCO 

194 A 00C2 

195 A 

196 A 

197 A 00C3 

198 A 00C4 

199 A 00C6 

200 A OOCA 

201 A OOCC 

202 A OOCE 

203 A OODO 

204 A 00D2 

205 A 00D4 

206 A 00D8 

207 A OODA 

208 A OODO 

209 A OODE 

210 A 

211 A 

212 A OOEO 

213 A 00E2 

214 A 00E5 

215 A 00E7 

216 A 00E8 

217 A OOEB 

218 A OOEC 

219 A OOEE 

220 A OOEF 

221 A 00F1 

222 A 00F3 

223 A 

224 A 



58 

58 

58 

D702 

80E7 



DA02 
39 

OOBO 
36 



17 

8DE9 
188F 
32 
39 

OOBA 
C139 
2302 
CB09 
C40F 
39 

00C3 
36 

8616 

188C103F 

2602 

8606 

8010 

8602 

800C 

188C103F 

2603 

18E600 

32 

20A3 

OOEO 

A73B 

18E700 

6C3B 

3C 

CE0D05 
09 

26FD 

38 

6A3B 

6F3B 

39 



* 

GETADR 



LSLB 
LSLB 
LSLB 
STAB 
BSR 
BSR 
ORAB 
RTS 

EQU 
PSHA 
BSR 
TBA 
BSR 
XGDY 
PULA 
RTS 

* 

HEXBIN EQU 
CMPB 
BLS 
ADDB 

HEXNUM ANDB 
RTS 



PROG 



PROGA 



PROGX 



EQU 

PSHA 

LDAA 

CPY 

BNE 

LDAA 

BSR 

LDAA 

BSR 

CPY 

BNE 

LDAB 

PULA 

BRA 



PROGRAM EQU 
STAA 
STAB 
INC 
PSHX 
LDX 

UAIT2 DEX 
BNE 
PULX 
DEC 
CLR 
RTS 

* 

END 



<TEMP 
READC 
HEXBIN 
<TEHP 



RDBYTE 



RDBYTE 



* 

#'9 
HEXNUM 
#9 
#$F 



#$16 

#CONFIG 

PROGA 

#$06 

PROGRAM 

#2 

PROGRAM 
#CONFIG 
PROGX 

,y 

L0AD1D 



PPROG,X 

PPROG.X 

#mS10 

WAIT2 

PPROG.X 
PPROG.X 



Get ASCII char in ACCB 



Return with byte in ACCB 



Save byte counter 

Read MS byte of address 

and put it in MS byte of ACCD 

Now read LS byte of address into LS byte of ACCD 
Put load address in Y 
Restore byte counter 
and return. 



If ACCB>9 then assume its A-F 



Save ACCA. 

Default to byte erase mode 

If byte's address is CONFIG then use 

bulk erase, to allow for A1 & A8 as well as A2. 
Now erase byte, or entire memory + CONFIG. 

Now program byte. 

If byte was CONFIG register then 

load ACCB with old value, to prevent hangup later. 

Restore ACCA 

and return to main bit. 



Enable internal addr/data latches. 

Write to required address 

Enable internal programming voltage 

and wait 10mS 



Disable internal programming voltage 
Release internal addr/data latches 
and return 
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SYMBOL TABLE: 


Total Entries= 


41 




BAUD 


002B 


PROGA 


OOCE 


CONFIG 


103F 


PROGRAM 


OOEO 


DATAPOLL 


0069 


PROGX 


OODD 


EEOPT 


0000 


RDBYTE 


009 F 


GETADR 


00B0 


RDRF 


0020 


HEXBIN 


OOBA 


READC 


0092 


HEXNUM 


OOCO 


ReadOpt 


0012 


HPRIO 


003C 


SCCR1 


002C 


LASTBYTE 


0003 


SCCR2 


002D 


LOAD 


002E 


SCDR 


002 F 


LOAD1 


0053 


SCSR 


002E 


LOAD 1 A 


005E 


SMOD 


0040 


LOAD IB 


0073 


TDRE 


0080 


LOAD 1 D 


0083 


TEMP 


0002 


LOAD 1 E 


0072 


VERIFY 


0087 


L0AD9 


0045 


WAIT1 


0066 


MASK 


0001 


WAIT2 


OOEB 


MDA 


0020 


URITEC 


0098 


OptVerf 


0027 


mS10 


0D05 


PPROG 


003B 


US500 


00A6 


PROG 


00C3 
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